A critical use-after-free vulnerability in the Linux kernel SCTP stack could allow an unauthenticated attacker to trigger system instability or potentially achieve arbitrary code execution.

This is a use-after-free vulnerability within the SCTP protocol implementation. An attacker can trigger the flaw by sending crafted packets that interact with a transport that has been marked as dead via an ASCONF DEL-IP operation, leading to memory corruption when the kernel accesses the freed transport state.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation could lead to a complete denial of service through kernel panic or, in complex scenarios, remote code execution with elevated privileges, severely impacting service availability and data integrity.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Review system logs for kernel panic events or unexpected SCTP-related stack traces that may indicate exploitation attempts.

Compensating Controls: If patching is not immediately feasible, disable SCTP support in the kernel if it is not required for network operations to eliminate the attack surface.

Public Exploit Available: Unknown.

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize testing and deploying the provided kernel updates across all affected infrastructure. System administrators should verify their current kernel version and apply the appropriate patch as soon as it is released by their respective Linux distribution maintainers to minimize exposure to potential exploitation.